Privacy Policy

1. Who we are

AZMA Academy — Aiman Zainal Martial Arts(“AZMA Academy”, “we”) provides kids and teens martial arts coaching across the Klang Valley, Malaysia. This policy explains how we handle personal data in accordance with the Personal Data Protection Act 2010 (PDPA).

2. Data we collect

From parents/guardians (the account holder and buyer):

• Name, phone number, and email address
• Location (area, condominium, or address where classes are held)
• Payment records (processed by Stripe — we never store card numbers)

About the child, collected from the parent with the parent’s consent:

• Name and age
• Relevant medical conditions or physical limitations disclosed to us
• Class attendance and per-class progress-report scores and coach notes

3. How we use it

• To schedule and deliver trial and regular classes
• To adapt training safely to your child’s age and medical disclosures
• To share progress reports with you
• To process payments and send receipts and calendar invites
• To contact you about your booking via phone, WhatsApp, or email
• With your consent, to request a review after your child has trained with us

We do not sell personal data or use it for third-party advertising.

4. Photos & videos of children

We only photograph or film students with explicit written parental consent, collected before the first regular class. Consent is optional and can be withdrawn at any time by contacting us — we will remove the child’s images from our marketing within a reasonable period. Trial classes are never photographed.

5. Training acknowledgment

Martial arts training involves physical activity. Before the first class, parents confirm a training acknowledgment covering age-appropriate contact levels, safety protocols, and the accuracy of medical disclosures. This acknowledgment is stored with your enrollment records.

6. Service providers

We use a small number of processors to run our service: Supabase (database), Stripe (payments), Vercel (website hosting), Resend (transactional email), Meta WhatsApp Business (messaging), and PostHog (privacy-respecting site analytics). Each receives only the data needed for its function.

7. Retention & your rights

We keep lead data for up to 12 months after last contact, and enrollment/payment records as required by Malaysian law. Under the PDPA you may request access to, correction of, or deletion of your (and your child’s) personal data, or withdraw consent, by contacting az.martialart@gmail.com or WhatsApp +60 12-261 2477.